$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.cer File: DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.cer (raw, json) Hash identifier: YMeptTdoiF1gMxnhN5IlfJ0K8Q1Gg6WTF89K/aU4Pc8= Subject key identifier: DB:87:34:0E:A6:23:C9:B3:99:64:EF:C8:DD:A9:AE:6B:52:4B:F5:0C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 69535378BFF174A7F8B621DB59AC2327F7E7D3E2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.mft caRepository: rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 02 May 2025 02:50:59 +0000 Certificate not after: Fri 01 May 2026 02:55:59 +0000 Subordinate resources: AS: 268056 IP: 45.168.88.0/22 IP: 2804:5748::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 11:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:53:53:78:bf:f1:74:a7:f8:b6:21:db:59:ac:23:27:f7:e7:d3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 2 02:50:59 2025 GMT Not After : May 1 02:55:59 2026 GMT Subject: CN=DB87340EA623C9B39964EFC8DDA9AE6B524BF50C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:79:65:ee:f4:4c:ff:7d:2c:1e:fb:dc:98: 3e:15:3f:69:4a:ec:1c:8a:2f:b7:3b:70:39:e8:9c: 14:ec:fe:12:26:11:13:aa:10:35:86:19:dd:92:21: 94:9d:b6:1e:5c:74:1c:54:0b:1b:a0:a5:20:bb:2b: 45:01:dc:7d:28:bb:ca:85:aa:77:21:e3:1d:76:b9: c3:95:d7:fa:3b:7e:2a:e9:a5:52:7c:b4:24:1d:8a: 65:de:c8:0c:35:b6:f9:2a:4c:30:4b:d7:a4:9e:30: a6:e6:5d:06:5c:0d:d2:fd:b0:a9:ac:f6:8d:74:43: 98:f1:75:23:c8:fd:2a:a1:25:9e:4c:f6:b3:4e:97: ae:a2:21:2f:d0:73:c4:c0:b0:af:86:66:b2:32:de: 71:45:a3:bc:97:c8:17:79:c6:2c:85:d6:0e:fe:6a: 7e:f5:8f:de:d0:f6:4b:15:8e:dc:4f:cf:2a:00:ab: 8b:1c:dd:87:18:31:ee:d2:b8:65:3f:52:1e:f5:37: 31:47:88:6b:e5:b9:32:a8:c3:ed:b9:02:13:fc:7b: 2b:68:57:e9:11:f2:e3:35:61:8c:21:14:fa:10:9a: 8b:8f:29:2c:d0:e2:ec:8c:1b:22:f2:66:a4:7e:47: c7:e3:ff:f8:28:31:59:29:82:eb:0c:fa:53:40:72: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:87:34:0E:A6:23:C9:B3:99:64:EF:C8:DD:A9:AE:6B:52:4B:F5:0C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.88.0/22 IPv6: 2804:5748::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268056 Signature Algorithm: sha256WithRSAEncryption 4a:74:b0:fa:a2:75:e3:7a:fa:4e:14:02:00:f4:8b:27:28:ba: 63:2b:ab:6a:c9:81:8a:c8:d7:cc:77:0c:de:6b:8b:29:27:41: 09:7e:3d:7d:aa:3c:f1:4a:6c:15:bf:c6:33:bd:06:26:ad:e3: 8f:8f:c9:20:51:f1:3f:00:40:93:3f:89:0d:7b:b6:7f:a0:2f: 4f:b4:1b:b3:cb:a3:22:f9:b4:58:33:fb:cd:aa:96:ad:a3:6b: f4:af:36:93:7d:94:86:86:81:7c:3f:18:b1:6a:c2:f9:9c:bd: ea:a6:2f:04:56:a0:5b:1f:66:a9:79:c5:66:53:6c:64:8c:94: 32:0e:b4:e1:bd:12:e0:06:08:a2:72:f8:58:4a:ed:76:03:8e: 4d:e1:17:c1:8a:9a:c1:02:b9:99:da:5e:b8:97:4c:b6:03:27: 26:1e:0c:f1:29:19:4d:94:8a:60:f9:13:84:de:f4:cf:60:c2: 0f:5d:44:91:c8:2f:4e:ca:f9:69:12:e2:87:48:d2:b8:0e:2f: c8:4d:5e:5e:74:42:6a:38:77:e0:17:a5:6e:46:8b:81:ca:4d: a7:f5:b9:a8:da:53:9e:fc:6e:00:ce:a7:2b:8f:0a:9d:a3:98: d1:2a:41:a2:9b:fe:f0:b7:90:af:4e:e6:00:53:8b:91:ec:cb: be:9b:15:14 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUaVNTeL/xdKf4tiHbWawjJ/fn0+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDIwMjUwNTlaFw0yNjA1MDEwMjU1NTlaMDMxMTAvBgNV BAMTKERCODczNDBFQTYyM0M5QjM5OTY0RUZDOEREQTlBRTZCNTI0QkY1MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJ3ll7vRM/30sHvvcmD4VP2lK 7ByKL7c7cDnonBTs/hImEROqEDWGGd2SIZSdth5cdBxUCxugpSC7K0UB3H0ou8qF qnch4x12ucOV1/o7firppVJ8tCQdimXeyAw1tvkqTDBL16SeMKbmXQZcDdL9sKms 9o10Q5jxdSPI/SqhJZ5M9rNOl66iIS/Qc8TAsK+GZrIy3nFFo7yXyBd5xiyF1g7+ an71j97Q9ksVjtxPzyoAq4sc3YcYMe7SuGU/Uh71NzFHiGvluTKow+25AhP8eyto V+kR8uM1YYwhFPoQmouPKSzQ4uyMGyLyZqR+R8fj//goMVkpgusM+lNAcifrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbhzQOpiPJs5lk 78jdqa5rUkv1DDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1px Rm9DS3ZYd0VpQzZOZWVuY3o2RHdRekp6S25GdVFjMlFKaTQ3V3VnRmEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0da cUZvQ0t2WHdFaUM2TmVlbmN6NkR3UXpKektuRnVRYzJRSmk0N1d1Z0ZhLzAvREI4 NzM0MEVBNjIzQzlCMzk5NjRFRkM4RERBOUFFNkI1MjRCRjUwQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLahYMA0EAgACMAcDBQAoBFdIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXGDANBgkqhkiG9w0BAQsFAAOCAQEASnSw+qJ143r6ThQC APSLJyi6YyurasmBisjXzHcM3muLKSdBCX49fao88UpsFb/GM70GJq3jj4/JIFHx PwBAkz+JDXu2f6AvT7Qbs8ujIvm0WDP7zaqWraNr9K82k32UhoaBfD8YsWrC+Zy9 6qYvBFagWx9mqXnFZlNsZIyUMg604b0S4AYIonL4WErtdgOOTeEXwYqawQK5mdpe uJdMtgMnJh4M8SkZTZSKYPkThN70z2DCD11EkcgvTsr5aRLih0jSuA4vyE1eXnRC ajh34BelbkaLgcpNp/W5qNpTnvxuAM6nK48KnaOY0SpBopv+8LeQr07mAFOLkezL vpsVFA== -----END CERTIFICATE-----Generated at Thu May 8 11:04:07 2025 by rpki-client